OPNsense pros and cons

The IDS and IPS features are valuable. From the usability perspective, there is a lot of good documentation. As IT professionals, we found it very easy to configure the firewall. It was easy to configure and use.

What I like best about OPNsense is that, as a firewall, it's pretty good. I'm quite impressed with it. I had an excellent experience with OPNsense, which helped me achieve the targets I wanted.

OPNsense is easy to scale when running on the hardware.

The initial implementation process is simple.

It has an open license. It works very well, and there is an update every month.

It's more secure and more reliable.

We have found pretty much all the features of the solution to be valuable.

OPNsense could improve by making the configuration more web-based rather than shell or command-line-based.

OPNsense is highly stable.

I have found the solution has some great features overall, such as guest access capabilities, dashboards, and ease of use. There is plenty of documentation and support and it has the plugins that I needed.

We did not like the fact that you have to configure everything with the graphic user interface. We have used other firewalls, such as FortiGate, that you can configure via code. OPNsense is not easy to integrate. When you are deploying via GitHub or another source repository, this is not possible. That's one thing we didn't like much.

An area for improvement in OPNsense is the hardware, which needs to be updated more frequently. DNS blocking is another good feature I want to be added to the solution. pfSense has a peer-blocking feature that I also want to see in OPNsense.

The interface needs to be simplified. It is not user-friendly.

While they do have paid options that actually gives better features, for most of the clients, if they tend to take a paid option will instead opt for Fortinet.

Its interface should be a little bit better.

The IPS solution could be more reliable.

The solution could be more secure.

OPNsense could improve by making the configuration more web-based rather than shell or command-line-based.

The support for OPNsense is good because we have documents available on the internet. The support could improve a little.

The logging could improve in OPNsense.